T-mobile Usa, Inc.

Keith Wood

Boris Maisuradze

Aditya Mehta

Alan Denis MacDonald

Michael A Bishop

Jeff Ahmet

Taha Najeeb

Grzegorz Wosik

Waqas Gull

Muhammad Shakil

Alain Soleil

Jay Eritsland

Tomas Soderberg

Aaron Sorrell

Michael Joseph Von Wald

Systems, methods, and apparatuses may include a network onboarding manager for configuring network security features at application hosting sites of a service provider network, for instance, as part of a procedure for deploying an application onto the service provider network. The network onboarding manager may generate a security profile for the application. The security profile may include information indicating a security posture of the application with respect to network security features needed to deploy the application, which the system may use to generate and send configuration data to the hosting sites. One or more operations may be performed based on a user input received at a developer portal (e.g., via a user interface), or automatically based on one or more API calls made by the network onboarding manager and/or based on one or more security profile templates.

Application security for service provider networks

A shared session cache can be accessible by multiple load balancers, and can indicate whether client devices are associated with specific backend servers of a server pool. When a client device connects to a load balancer, the load balancer can use the shared session cache to determine if the client device is already associated with a specific backend server. If so, the load balancer can connect the client device to that specific backend server so that it can continue an existing session with the specific backend server. If not, the load balancer can select a new backend server for the client device, connect the client device to the newly selected backend server, and create an entry in the shared session cache indicating that the client device is associated with the newly selected backend server.

Load balancer shared session cache

Techniques for proxy based network access are discussed herein. In some examples, the techniques can be implemented in a network proxy device for Citizens Broadband Radio Service (CBRS). A base station or a domain proxy device may manage or otherwise use CBRS resources by exchanging signaling messages with a Spectrum Access System (SAS). The base station or domain proxy device may transmit signaling messages in a first private network to a network device bridging the first private network and a second private network with limited access to a public network. The network device send proxy message(s) in response to the signaling messages to the SAS and can establish an encrypted session layer or application layer tunnel between the base station and/or domain proxy device. The proxy based network access preserves secure networks while still allowing limited messaging with other public or private networks.

Proxy based network access

Growing community of inventors

Black Diamond, WA, United States of America

Keith Wood